ComplianceAsCode / ComplianceAsCode/content
CIS 1.3.1 Ensure AIDE is installed
- Dominant language
- Shell
- Stars
- 2.8k
- Forks
- 828
- Avg merge
- 3d 8m
- Merged PRs (30d)
- 80
Description
#### Description of problem:
Check for rule `xccdf_org.ssgproject.content_rule_aide_build_database` fails on Ubuntu 22.04.
#### SCAP Security Guide Version:
master branch
#### Operating System Version:
Ubuntu 22.04 LTS
#### Steps to Reproduce:
1. Install AIDE: `apt install aide aide-common`
2. Initialize AIDE: `aideinit && mv /var/lib/aide/aide.db.new /var/lib/aide/aide.db`
3. Run SCAP: `oscap xccdf eval --profile xccdf_org.ssgproject.content_profile_cis_level2_server --rule xccdf_org.ssgproject.content_rule_aide_build_database ssg-ubuntu2204-ds.xml`
#### Actual Results:
```
Title Build and Test AIDE Database
Rule xccdf_org.ssgproject.content_rule_aide_build_database
Result fail
```
#### Expected Results:
```
Title Build and Test AIDE Database
Rule xccdf_org.ssgproject.content_rule_aide_build_database
Result pass
```
#### Additional Information/Debugging Steps:
On Ubuntu 22.04 database definition keyword in the `/etc/aide/aide.conf` file was changed from `database=file:/var/lib/aide/aide.db` to `database_in=file:/var/lib/aide/aide.db`.
Adding `database=file:/var/lib/aide/aide.db` in the `/etc/aide/aide.conf` as workaround gives this warning:
```
WARNING: /etc/aide/aide.conf:194: Using 'database' is DEPRECATED. Update your config and use 'database_in' instead (line: 'database=file:/var/lib/aide/aide.db')
```
Contributor guide
Assessment
This issue has not been assessed yet.